FocusPipe — Privacy Policy

FocusPipe (“we”, “our”, “the app”) is an iOS application that helps you break tasks into micro-steps with AI assistance. We are committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights.

1. Summary

2. Data We Collect

2.1 Stored locally on your device

The following data is stored only on your device using Apple’s SwiftData and never leaves it unless you explicitly export it:

• Tasks, micro-steps, completion status
• Brain dump entries (raw text and processed results)
• Energy logs and streak history
• App settings and preferences
• AI cache (to reduce repeated AI calls)
• Local analytics records (event counts only — never personal info)

2.2 Sent to our backend (transient, not stored)

The app supports two AI engines, selectable in Settings → AI Engine:

• On-Device AI (Apple Intelligence, iOS 26+ on supported devices): the language model runs entirely on your iPhone. No text leaves your device.
• Cloud AI: text is sent to our backend at api.xmin.site over HTTPS for processing.

When (and only when) you opt in to Cloud AI, the following text is sent over HTTPS:

• Task description (e.g., “Clean my desk”)
• Step instruction (when refining a step)
• Brain dump raw text (when you tap “Organize for me”)
• Selected energy level (high / medium / low)

We do not send any user identifier, device hardware identifier, IP-derived identifier, or contact information with these requests. Our backend processes the text in memory to generate AI responses and does not retain the content after the response is returned.

2.3 Authentication / anti-abuse

To prevent abuse of our backend, each request includes an Apple-signed App Store receipt (StoreKit 2 AppTransaction JWS, iOS 16+ standard). The receipt contains your app’s bundle identifier, an opaque device verification token (random, not linkable to your Apple ID or device hardware ID), and your original install date. We use the device verification token only for rate limiting (see Section 5).

2.4 Subscriptions

Subscription purchases are handled entirely by Apple’s StoreKit. We never see your payment method, Apple ID email, or billing address. We only know whether your current subscription is active.

2.5 Notifications

If you opt in, the app schedules local notifications for daily reminders and streak alerts. Local notifications are scheduled by iOS and never leave your device.

3. What We Do NOT Collect

• Your name, email, phone number, or any other personal identifier
• Your contacts, photos, location, microphone, camera, or health data
• Your IP address (we do not log it on the backend)
• Cross-app or cross-website browsing behavior
• Any data from other apps on your device

4. Third-Party Services

4.1 AI processing backend

• Provider: Operated by us (the developer)
• URL: api.xmin.site
• Purpose: Generate AI responses for task breakdown, brain dump, and step refinement
• Data sent: Task / step / brain dump text + energy level (no personal identifiers)
• Retention: Not stored long-term
• Subprocessor: Our backend may forward requests to an upstream large language model provider for inference. The upstream provider receives only the text and returns the result; they do not receive any user identifier.

4.2 Apple StoreKit

Used for in-app purchases (Pro Monthly $3.99, Pro Yearly $34.99). Apple’s privacy policy applies to StoreKit data: apple.com/legal/privacy/.

4.3 No other third parties

We do not use third-party analytics, ad networks, attribution providers, social SDKs, or off-device crash reporters.

5. Pro Subscription Fair Use

FocusPipe Pro removes the daily caps applied to free users. To prevent abuse, the following fair use limits apply to all Pro subscriptions:

• Approximately 20 requests per minute per device
• Approximately 500 requests per day per device
• Pro is licensed for individual personal productivity. Sharing credentials or automating requests via scripts or shortcuts is not permitted.
• Usage substantially exceeding typical patterns may be temporarily throttled or downgraded to the on-device rule engine without refund.

These limits exist to prevent abuse, not to constrain genuine personal use. The vast majority of Pro users will never approach them.

6. Your Rights and Controls

• Export your data: Settings → Data → Export Data (CSV or JSON)
• Delete all data: Settings → Data → Clear All Data
• Switch off cloud AI: Settings → AI Engine → choose On-Device Rule Engine. With this setting, no text leaves your device.
• Withdraw cloud AI consent: Same as above.
• Delete the app: Uninstalling FocusPipe deletes all locally stored data via the iOS sandbox.

There is no online account to delete because we do not have user accounts.

7. Children’s Privacy

FocusPipe is rated 4+ but is designed for adults managing ADHD-related productivity challenges. We do not knowingly collect data from children under 13. If you believe a child has used the cloud AI features, please contact us so we can confirm there is no retained content.

8. Data Security

• All network requests use HTTPS (TLS 1.2+).
• Backend authentication uses Apple-signed JWS receipts.
• No request content is stored on our servers beyond the duration of an in-flight request.
• On-device data is protected by iOS sandboxing and Data Protection.

9. International Data Transfers

If you use cloud AI features outside the United States, your text may be processed by servers located in the United States or other regions. By using these features, you consent to this transfer.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the most recent change. For material changes, we will surface a notice in the app on next launch.

11. Contact

For privacy questions, data requests, or fair use disputes:

• Email: support@xmin.site
• In-app: Settings → Privacy Dashboard